Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E586DAE9CCB11F1A3C8020BCF1D38B0.roa
File:                     4E586DAE9CCB11F1A3C8020BCF1D38B0.roa (raw, json)
Hash identifier:          BzCoH6DNYOJxOYrpL7V9q3LAWr7DEgvAcLEx2OjTaDQ=
Subject key identifier:   FB:DD:DC:AB:8F:38:D0:A4:A5:C9:F7:13:CD:BC:2B:10:51:FA:96:37
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E0EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E586DAE9CCB11F1A3C8020BCF1D38B0.roa
Signing time:             Thu 20 Aug 2026 19:14:03 +0000
ROA not before:           Thu 20 Aug 2026 19:13:59 +0000
ROA not after:            Tue 22 Sep 2026 19:13:59 +0000
asID:                     22516
IP address blocks:        154.199.160.0/19 maxlen: 24
                          154.199.224.0/19 maxlen: 24
                          154.202.32.0/19 maxlen: 24
                          154.207.32.0/19 maxlen: 24
                          154.207.64.0/18 maxlen: 24
                          154.207.192.0/18 maxlen: 24
                          154.212.32.0/19 maxlen: 24
                          154.219.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123114 (0x1e0ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 19:13:59 2026 GMT
            Not After : Sep 22 19:13:59 2026 GMT
        Subject: CN=6a8751fb-0660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a9:f6:1b:6b:ed:72:d4:ce:3b:72:82:5d:bd:
                    e1:7d:b0:7a:72:ae:35:49:fc:30:e1:e0:fe:20:c6:
                    c4:c3:8f:26:9f:da:d0:3e:e8:8a:83:12:3b:ec:1e:
                    b0:1c:45:83:93:c8:98:ab:3a:a3:63:48:49:bd:e6:
                    92:e0:61:1d:e7:72:d7:30:bf:c9:7e:43:98:b5:03:
                    d0:0b:9a:3a:e6:11:2f:b4:20:85:ee:68:2e:a7:0a:
                    78:1c:7f:89:5c:e6:e3:42:4a:d8:b1:f5:6b:3b:70:
                    ed:f6:f5:ba:ca:bd:5b:83:c2:4c:06:6c:b7:46:dc:
                    77:a5:fa:1d:f1:f9:ce:09:75:ba:d0:b4:9c:e0:22:
                    49:25:e8:c6:e0:60:2c:80:ea:b4:e2:e0:40:98:ad:
                    18:40:48:d2:67:a2:12:14:68:f6:8c:5f:c9:42:d1:
                    a5:d6:f2:d0:a9:5e:cb:52:f2:23:f8:fb:61:33:7b:
                    a8:38:e2:cc:99:42:33:96:62:77:ea:8a:b6:89:f8:
                    a2:d5:05:c1:40:ef:95:9a:47:e9:75:88:f7:93:8b:
                    db:68:fc:82:ea:43:81:5c:78:f4:e0:b4:da:26:96:
                    bc:2e:58:2a:43:73:a0:d7:9c:47:a3:bc:5d:c3:f1:
                    12:4e:8d:eb:9b:94:49:05:18:cb:93:5f:9a:ff:c3:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DD:DC:AB:8F:38:D0:A4:A5:C9:F7:13:CD:BC:2B:10:51:FA:96:37
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E586DAE9CCB11F1A3C8020BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.199.160.0/19
                  154.199.224.0/19
                  154.202.32.0/19
                  154.207.32.0-154.207.127.255
                  154.207.192.0/18
                  154.212.32.0/19
                  154.219.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:8e:9d:32:2c:19:2d:82:08:c4:3b:28:67:82:50:32:b3:7a:
         21:68:81:08:35:24:ba:01:b4:35:38:f9:2b:83:06:5a:da:e5:
         01:71:9c:e4:2e:b0:2e:aa:7b:fd:48:7b:cb:fd:ec:4a:9b:34:
         a4:e9:9c:74:26:02:9e:82:39:22:6f:ff:e9:70:9f:df:f4:b5:
         97:01:be:07:16:ec:5c:db:80:13:12:7d:83:04:61:86:cd:06:
         45:36:b3:59:09:2f:63:f6:33:c0:97:0a:23:08:37:b6:17:da:
         32:3e:1f:c8:c9:45:ed:b3:af:43:94:f1:d8:86:25:66:5a:47:
         27:4b:0e:7c:4a:7e:44:15:fa:e4:19:8b:85:33:50:c1:52:2f:
         3b:18:fb:c7:3c:cc:5f:28:4c:83:a8:59:ea:cc:c4:2a:e3:0e:
         25:e6:66:97:57:0c:84:9f:58:ca:3b:57:d1:fd:4b:49:33:53:
         92:46:dd:99:1f:40:f4:d8:f8:24:6c:ad:28:6f:ff:61:9a:67:
         9e:47:3a:31:e6:48:99:34:d2:fa:e2:32:09:1c:11:af:9f:d1:
         88:56:71:6c:89:e9:e4:8a:4e:b5:93:e2:71:2b:94:7f:06:c4:
         37:d5:e8:a3:9a:45:51:b8:78:6d:ce:5f:f8:c3:06:d6:b1:96:
         23:8d:88:45
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIDAeDqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwODIwMTkxMzU5WhcNMjYwOTIyMTkxMzU5WjAYMRYw
FAYDVQQDEw02YTg3NTFmYi0wNjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAman2G2vtctTOO3KCXb3hfbB6cq41Sfww4eD+IMbEw48mn9rQPuiKgxI7
7B6wHEWDk8iYqzqjY0hJveaS4GEd53LXML/JfkOYtQPQC5o65hEvtCCF7mgupwp4
HH+JXObjQkrYsfVrO3Dt9vW6yr1bg8JMBmy3Rtx3pfod8fnOCXW60LSc4CJJJejG
4GAsgOq04uBAmK0YQEjSZ6ISFGj2jF/JQtGl1vLQqV7LUvIj+PthM3uoOOLMmUIz
lmJ36oq2ifii1QXBQO+VmkfpdYj3k4vbaPyC6kOBXHj04LTaJpa8LlgqQ3Og15xH
o7xdw/ESTo3rm5RJBRjLk1+a/8MNuQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFPvd
3KuPONCkpcn3E828KxBR+pY3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTU4NkRBRTlDQ0IxMUYxQTNDODAyMEJDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQFmsegAwQFmsfgAwQFmsog
MAwDBAWazyADBAeazwADBAaaz8ADBAWa1CADBAWa2yAwDQYJKoZIhvcNAQELBQAD
ggEBAK6OnTIsGS2CCMQ7KGeCUDKzeiFogQg1JLoBtDU4+SuDBlra5QFxnOQusC6q
e/1Ie8v97EqbNKTpnHQmAp6COSJv/+lwn9/0tZcBvgcW7FzbgBMSfYMEYYbNBkU2
s1kJL2P2M8CXCiMIN7YX2jI+H8jJRe2zr0OU8diGJWZaRydLDnxKfkQV+uQZi4Uz
UMFSLzsY+8c8zF8oTIOoWerMxCrjDiXmZpdXDISfWMo7V9H9S0kzU5JG3ZkfQPTY
+CRsrShv/2GaZ55HOjHmSJk00vriMgkcEa+f0YhWcWyJ6eSKTrWT4nErlH8GxDfV
6KOaRVG4eG3OX/jDBtaxliONiEU=
-----END CERTIFICATE-----